Page 2 of 16 results (0.002 seconds)

CVSS: 9.8EPSS: 77%CPEs: 11EXPL: 4

CVE-2010-3407 – IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow

https://notcve.org/view.php?id=CVE-2010-3407

16 Sep 2010 — Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V. Desbordamiento de búfer basado en pila en la función MailCheck821Address en nnotes.dll en el servicio nrouter.exe en el servidor IBM Lotus Domino... • https://www.exploit-db.com/exploits/15005 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.1EPSS: 0%CPEs: 11EXPL: 2

CVE-2010-0927

https://notcve.org/view.php?id=CVE-2010-0927

05 Mar 2010 — Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en help/readme.nsf/Header en the Help component en IBM Lotus Domino v7.x anteriores a v7.0.4 y v8.x anteriores a v8.0.2 permite a atacantes remoto... • http://www.cybsec.com/vuln/CYBSEC_Advisory_2010_0301_IBM_%20Lotus_Dominio_Readme_nsf_Reflected_XSS.pdf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 2%CPEs: 2EXPL: 0

CVE-2010-0358

https://notcve.org/view.php?id=CVE-2010-0358

20 Jan 2010 — Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087. Desbordamiento de búfer basado en pila en el servidor IBM Lotus Domino v7 y v8.5 FP1 permite a atacantes remotos producir una denegación de servicio (salida del demonio) y posiblemente obtener un impacto desconocido a trav... • http://intevydis.blogspot.com/2010/01/lotus-domino-7-probably-8-ldap-heap.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 0%CPEs: 10EXPL: 0

CVE-2009-4594

https://notcve.org/view.php?id=CVE-2009-4594

09 Jan 2010 — Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH. Vulnerabilidad sin especificar en IBM Lotus iNotes (también conocido como Domino Web Access o DWA) anterior a v229.131 para Domino v8.0.x tiene un impacto y vectores de ataque desconocidos, también conocido como SPR SDOY7RHBNH. • http://www-01.ibm.com/support/docview.wss?uid=swg27015942 •

CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 2

CVE-2009-1286

https://notcve.org/view.php?id=CVE-2009-1286

13 Apr 2009 — The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities. Vulnerabilidad en la tarea de servidor IMAP en IBM Lotus Domino v8.0.2 anterior a FP1 IF1 y v8.5 anterior IF3 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un mensaje de e-mail MIME con adjuntos RFC822 (o blobs... • http://secunia.com/advisories/34657 •

CVSS: 10.0EPSS: 83%CPEs: 5EXPL: 1

CVE-2008-2240 – IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow

https://notcve.org/view.php?id=CVE-2008-2240

22 May 2008 — Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header. Desbordamiento de búfer basado en pila en el Servicio Web Server en IBM Lotus Domino anterior a 7.0.3 FP1 y 8.x anterior a 8.0.1, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) o la posibilidad de ejecutar código de su ... • https://www.exploit-db.com/exploits/16697 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •